CVE-2023-47471

Published: Nov 16, 2023Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via the slice_segment_header function in the slice.cc component.

Affected (1)

Products: Struktur: Libde265

Struktur

1 product

Libde265

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Struktur Libde265	Version 1.0.12

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (6)

https://github.com/strukturag/libde265/commit/e36b4a1b0bafa53df47514c419d5be3e8916ebc7

Source: cve@mitre.org

PatchVendor Advisory

https://github.com/strukturag/libde265/issues/426

Source: cve@mitre.org

Issue TrackingVendor Advisory

https://lists.debian.org/debian-lts-announce/2023/11/msg00032.html

Source: cve@mitre.org

https://github.com/strukturag/libde265/commit/e36b4a1b0bafa53df47514c419d5be3e8916ebc7

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://github.com/strukturag/libde265/issues/426

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

https://lists.debian.org/debian-lts-announce/2023/11/msg00032.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.